EXIN Cyber Security Foundation
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The EXIN Cyber Security Foundation is an entry-level certification offered by EXIN, an independent certification and examination institute. It is designed for professionals who need a working understanding of cyber security without necessarily holding a technical engineering role: IT and business staff, project and product managers, compliance and risk personnel, and anyone whose work touches information systems and digital risk. Candidates typically use it to establish a shared vocabulary with security teams and to demonstrate baseline competence to employers.
On this page we organise preparation around four equally weighted domains: Cyber Security Fundamentals, Cyber Security Threats and Attacks, Cyber Security Controls and Measures, and Cyber Security Governance and Awareness. Each carries 25 percent of the content, so no single domain can be skipped. Expect questions that test conceptual understanding and the ability to apply definitions to short scenarios, rather than deep configuration detail or vendor-specific tooling.
Preparation works best in two passes. First read a concise treatment of each domain so the terminology is familiar; then work through scenario-style practice questions and review every wrong answer back to the underlying concept. Pay particular attention to the governance and awareness domain, which candidates often under-prepare because it feels less technical.
We are an independent study platform and are not affiliated with EXIN. Administrative details such as question count, duration, passing score, fee, retake rules and certificate validity are not confirmed on this page and are marked for review; always verify them with EXIN before booking.
What you'll study
About EXIN Cyber Security Foundation preparation
Who should take the EXIN Cyber Security Foundation exam?
It suits non-specialists who need baseline cyber security knowledge: IT and business staff, project and product managers, and risk or compliance personnel. It is a foundation-level credential, so no prior security certification is assumed. Candidates with deep technical roles will usually need more advanced certifications instead.
How is the exam structured?
We cannot confirm the current question count, time limit or passing score, because the official page was unavailable when this guide was compiled. These details are flagged for review. Check the EXIN website or your accredited training provider for the authoritative format before you book and schedule your preparation.
How difficult is the exam?
Foundation-level exams test recognition and application of core concepts rather than deep technical skill. Difficulty comes from breadth across four equally weighted domains, not from trick questions. Candidates who study all four domains evenly and practise scenario-style questions generally find it manageable; those who study only the technical threat material often struggle.
Which domain should I study first?
Start with Cyber Security Fundamentals to build shared vocabulary, then move to Threats and Attacks, then Controls and Measures, which depends on understanding threats. Finish with Governance and Awareness. Because each domain is weighted at 25 percent, leave enough time for governance rather than treating it as an afterthought.
What are the most common failure modes?
Three recur: skipping the governance and awareness domain because it feels less technical; memorising definitions without practising their application to short scenarios; and confusing similar terms such as threat, vulnerability and risk, or incident and event. Reviewing every missed practice question back to its source concept fixes most of these.
What is the retake policy?
We do not have confirmed information on retakes, waiting periods or repeat fees for this exam, and we will not guess. Contact EXIN or your accredited training provider directly to ask how soon you can resit, what a resit costs, and whether any waiting period applies before booking a second attempt.
How long is the certificate valid?
Certificate validity is not confirmed in the source material available to us, so it is marked for review. Some EXIN credentials do not expire while others require periodic renewal. Confirm the validity period and any continuing-education requirement with EXIN before relying on the certificate for a job application or contract bid.
How much does the exam cost?
The exam fee is not confirmed here, because the official page could not be retrieved. Fees often differ between exam-only vouchers, self-study packages and instructor-led training bundles, and may vary by country or currency. Check EXIN's current price list or request a quote from an accredited provider.
How should I prepare in the final week?
Do timed practice sets covering all four domains, then spend your remaining time on the questions you got wrong. Re-read short summaries of each domain rather than long chapters. Confirm your exam appointment, identification requirements and any technical setup rules in advance, since administrative surprises cause more last-minute problems than knowledge gaps.